Skip to content
OpenAdvisories
Medium · 6.5 CVE-2026-11927 EUVD-2026-78892GHSA-g7h8-9v8x-r726

Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Access

Published Sep 15, 2026 · Updated Sep 20, 2026 · Assigned by ibm

Vendor: IBM Product: Security Verify Access Product: Security Verify Access Container Product: Verify Identity Access Product: Verify Identity Access Container

Description

IBM Security Verify Identity Access reverse proxy may allow parameters to be injected in requests to third party services.

Affected products

VendorProductAffectedFixed
IBM Verify Identity Access 11.0.0 – ≤ 11.0.3 Interim Fix 001 —
IBM Security Verify Access 10.0.0 – ≤ 10.0.9.2 Interim Fix 001 —
IBM Verify Identity Access Container 11.0.0 – ≤ 11.0.3 Interim Fix 001 —
IBM Security Verify Access Container 10.0.0 – ≤ 10.0.9.2 Interim Fix 001 —

References